From 27432b0ddc2ee1010f7b3db29d7cdf7fdb6ab128 Mon Sep 17 00:00:00 2001
From: Niklas Yann Wettengel <niyawe@niyawe.de>
Date: Sun, 19 May 2019 21:08:05 +0200
Subject: [PATCH] validate dnssec

---
 roles/install_bind/templates/named.conf.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/install_bind/templates/named.conf.j2 b/roles/install_bind/templates/named.conf.j2
index 9947b04..9e0cadb 100644
--- a/roles/install_bind/templates/named.conf.j2
+++ b/roles/install_bind/templates/named.conf.j2
@@ -5,7 +5,7 @@ options {
     pid-file "/run/named/named.pid";
 
     dnssec-enable yes;
-    dnssec-validation yes;
+    dnssec-validation auto;
 
     auth-nxdomain no;    # conform to RFC1035